HackingProfessional ServicesProfessional ServicesData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

Law Firm of Friedman + Bartoumian

bd_64bc801d5f2c857b · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 25, 2024

To disclose

—

Affected

Not disclosed

Linked

3 records

Confidence

66%

Full breach record for Law Firm of Friedman + Bartoumian →

The Law Firm of Friedman + Bartoumian reported unauthorized access to its network between October 26 and October 28, 2022. Unauthorized actors viewed and obtained files containing personal information of workers' compensation claimants, including names, dates of birth, Social Security numbers, driver's license numbers, financial account information, tax identification numbers, and health information. The firm engaged a cybersecurity firm, notified law enforcement, and offered credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Leak gap clock✗ Leak >180d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Oct 26, 2022

Begins

Mar 25, 2024

Filed

This filing is one of 3 records about the same incident.View merged incident

A leak claim by blacksuit about this victim was first seen 465 days before this filing.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteblacksuitbd_0d016099e9389e762022-12-16 · +465dVerified by operator

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_73a7d9ffb9ea04bb2024-03-25Verified by operator

Name: Law Firm of Friedman + Bartoumian
norm: law firm of friedman bartoumian

Name: Law Firm of Friedman + Bartoumian
norm: law firm of friedman bartoumian
Industry: Professional Servicesllm

Discovered: —
Breach occurred: Oct 26, 2022 – Oct 28, 2022
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External

During the incident: Implemented our incident response plan
Took measures to contain the activity
Launched an investigation
Engaged a cybersecurity firm
Notified law enforcement
Changes made: Taken steps to enhance our existing security measures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >180d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGMar 25 · first

California State AGMar 25 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-582983
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 25, 2024
Raw hash: 576b326e3e7a7c7ee23e23f95a6096a0093c5ce9a392dd1920c8f074d8ff8ae4

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityLaw Firm of Friedman + Bartoumian

Victim entityLaw Firm of Friedman + Bartoumian

IncidentUnauthorized Access

Stated responseImplemented our incident response plan

ComplianceLeak >180d

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov